baji2 Privacy Policy — How We Handle Your Data

baji2 ("baji2", "we", "us", "our") operates the online casino and sports betting platform accessible at baji2.pro. In the course of providing our services to players in Bangladesh and elsewhere, we collect, process and store certain personal data. This Privacy Policy describes our data practices in full and is intended to give you a clear and honest account of how your information is handled from the moment you first visit baji2 to the point at which your account is closed and your data is deleted or anonymised in accordance with our retention schedule.

By creating an account on baji2 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use baji2 and should close any existing account by contacting [email protected]. This Privacy Policy should be read alongside our Terms and Conditions, which govern the broader relationship between baji2 and its players.

baji2 collects personal data through several channels: directly from you when you register an account or contact support, automatically from your device and browser as you use the platform, and from third-party verification services where required for KYC compliance. The categories of personal data we collect include:

• Identity data: your full legal name, date of birth, gender (where provided) and nationality, collected at registration and verified during KYC checks.
• Contact data: your mobile phone number, email address and, where provided for bank transfer purposes, your bank account details or mobile wallet identifier (bKash, Nagad, Rocket or Upay account number).
• Financial transaction data: deposit amounts, withdrawal amounts, transaction timestamps, payment method used, and the reference identifiers generated by the payment processor for each transaction.
• Gaming activity data: bet history, game session records, wagering amounts, game outcomes, bonus usage history and responsible gaming tool settings (deposit limits, self-exclusion status).
• Technical data: IP address, device type, operating system, browser type and version, session duration, pages visited within baji2, time zone and general geographic location derived from IP address.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data or health information unless explicitly required for responsible gaming purposes (for example, where a player voluntarily discloses a gambling-related health concern to our support team). Where such data is provided, it is treated with the highest level of confidentiality and used solely for the stated purpose.

baji2 uses the personal data it collects only for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your consent:

• Account creation and management: to set up your baji2 account, verify your identity, process your KYC documentation and manage your account settings throughout the life of your account.
• Service delivery: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer and card channels; to credit winnings to your account; and to operate the games, betting markets and other features you use on baji2.
• Security and fraud prevention: to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion and money laundering. Our automated monitoring systems and security team use transaction data and behavioural patterns to identify suspicious activity.
• Responsible gaming: to monitor gaming behaviour for indicators of problem gambling, to administer voluntary limits and self-exclusion requests, and to communicate with players who may benefit from responsible gaming support resources.
• Communications: to send you transactional communications (deposit confirmations, withdrawal notifications, KYC status updates, support responses) and, where you have not opted out, promotional messages about baji2 bonuses, new games and seasonal offers.

Payment data is among the most sensitive categories of personal information that baji2 handles. When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay or any other payment channel, baji2 receives transaction reference data from the relevant payment processor. For mobile wallet transactions, baji2 receives only the transaction reference number and the masked account identifier — baji2 does not store your full bKash or Nagad PIN or your full card number.

Financial transaction records are retained for a minimum period required by applicable anti-money-laundering laws and regulations. These records may be shared with regulatory or law enforcement authorities where required by law. Outside of these mandatory disclosures, payment data is not shared with any third party.

baji2 does not sell your personal data. We share your data only in the limited circumstances described below:

• Payment processors: when processing deposits and withdrawals, baji2 shares the minimum transaction data necessary with the relevant payment processor (bKash, Nagad, Rocket, Upay, Visa, Mastercard or the relevant bank) to complete the transaction. These processors operate under their own privacy policies and data protection obligations.
• Game providers: baji2's game content is supplied by licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi. These providers may receive a session token and anonymised player identifier to deliver game content and calculate outcomes. They do not receive your name, contact details or payment information.
• Legal and regulatory authorities: baji2 will disclose personal data to competent authorities, regulators, law enforcement agencies or courts where required to do so by applicable law, court order or regulatory direction. baji2 will not voluntarily disclose data to government bodies absent a legal obligation to do so.
• Service providers: baji2 engages trusted third-party service providers for certain operational functions such as KYC verification services, cloud infrastructure hosting, customer support platforms and fraud detection tools. These providers act as data processors on baji2's behalf and are contractually required to handle your data only in accordance with baji2's instructions and this Privacy Policy.

Outside of these categories, baji2 will not share, sell, disclose or transfer your personal data to any third party without your explicit consent. We do not share player data with advertising networks, data brokers, social media platforms or any commercial partner for marketing purposes.

baji2 uses cookies — small text files placed on your device — and similar tracking technologies to operate the platform. The cookies baji2 uses fall into the following categories: (a) strictly necessary cookies, which are required for the platform to function and cannot be disabled (these include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery); (b) functional cookies, which remember your preferences such as language settings and responsible gaming limit configurations; and (c) analytics cookies, which help baji2 understand how players use the platform so that we can improve performance and fix issues.

baji2 does not use third-party advertising cookies or deploy cookie-based retargeting technologies. We do not place cookies on your device on behalf of external ad networks or social media platforms. You may configure your browser to reject or delete cookies, but please note that disabling strictly necessary cookies will affect your ability to log in to and use baji2.

baji2 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our internal data governance policies. The primary retention periods are as follows: account and identity data is retained for a minimum of 5 years following account closure to satisfy anti-money-laundering record-keeping obligations; financial transaction data is retained for a minimum of 5 years from the date of each transaction; gaming activity data is retained for a minimum of 3 years from the date of the activity; and technical/log data is retained for up to 12 months on a rolling basis.

Where you request deletion of your personal data and no legal retention obligation prevents us from complying, baji2 will delete or irreversibly anonymise your data within a reasonable period. Please note that anonymised data — data from which all identifying information has been stripped — is not considered personal data and may be retained indefinitely for statistical and platform improvement purposes.

You have a number of rights in respect of the personal data that baji2 holds about you. baji2 is committed to honouring these rights promptly and without undue burden to you. Your rights include:

• Right of access: you may request a copy of all personal data baji2 holds about you. We will provide this in a structured, readable format within a reasonable timeframe of receiving your verified request.
• Right to rectification: if personal data baji2 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. We encourage players to keep their account information up to date via the account settings page or by contacting support.
• Right to erasure: subject to legal retention obligations, you may request that baji2 delete your personal data. We will comply where no overriding legal obligation requires us to retain the data. Note that once an account is closed and data deleted, it cannot be recovered.
• Right to object to processing: you may object to baji2 processing your personal data for direct marketing purposes at any time. Once such an objection is received, baji2 will cease processing your data for that purpose immediately.
• Right to data portability: where technically feasible, you may request that baji2 provide your personal data in a machine-readable format so that it can be transferred to another service provider of your choosing.

To exercise any of the above rights, please contact the baji2 data team using the contact details in section 10 below. baji2 may need to verify your identity before processing a data rights request. We will respond to all verified requests within a reasonable timeframe. Where a request is refused, we will explain the reason for the refusal in writing.

baji2 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include: SSL/TLS encryption for all data in transit; encrypted storage for sensitive data at rest; access controls that restrict internal access to personal data on a need-to-know basis; regular security audits and penetration testing of our platform; and multi-factor authentication options for player accounts.

While baji2 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, baji2 will notify affected players promptly and take all necessary remedial steps. If you become aware of any unauthorised access to your baji2 account, please notify us immediately at [email protected] so that we can take action to secure your account.

baji2 is strictly an adults-only platform. Players must be 21 years of age or older to register and use baji2. baji2 does not knowingly collect personal data from any person under the age of 21. If baji2 discovers or is notified that an account has been registered by a person under 21, the account will be immediately closed, all balances will be forfeited, and any personal data associated with the underage account will be deleted promptly in accordance with our data retention policy. If you are a parent or guardian and believe that a minor in your care has registered with baji2, please contact us immediately at [email protected].

baji2 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform features. When we make material changes to this Privacy Policy, we will update the "Last updated" date at the top of the policy and, where the changes are significant, we will make reasonable efforts to notify registered players via the contact details held on their account. Your continued use of baji2 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how baji2 handles your personal data.

If you have any questions, concerns or requests relating to this Privacy Policy or the way baji2 handles your personal data, please contact the baji2 support and data team. We aim to respond to all privacy-related enquiries within 5 business days. Contact email: [email protected] (plain text — not a clickable link). Please include "Privacy Enquiry" in the subject of your message along with your registered account username so that we can locate your account and respond efficiently.